This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File:                     aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier:          gZB1Yt7XXSr09rsv02/WA1rbrEwpZdlaGtovLENaFs8=
Subject key identifier:   17:46:06:5C:ED:BE:4C:B3:A0:5B:1D:4C:FB:D4:C8:9E:D0:85:8D:62
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer:       /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial:       019B18DF35DE53A558B15C56B8450839B36D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number:          0F1D
Signing time:             Sat 13 Dec 2025 18:00:39 +0000
Manifest this update:     Sat 13 Dec 2025 18:00:39 +0000
Manifest next update:     Sun 14 Dec 2025 18:00:39 +0000
Files and hashes:         1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=)
                          2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=)
                          3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=)
                          4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: gnxZk3GxjH4RRBYc3TTWw3LnJbiYfD6a02ETdPUFekg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:18:df:35:de:53:a5:58:b1:5c:56:b8:45:08:39:b3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
        Validity
            Not Before: Dec 13 18:00:39 2025 GMT
            Not After : Dec 14 18:00:39 2025 GMT
        Subject: CN=1746065cedbe4cb3a05b1d4cfbd4c89ed0858d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:58:13:2a:d8:03:77:e1:d4:4f:4e:ca:0c:95:
                    0d:19:03:2b:19:d5:51:e8:9c:36:27:92:ae:39:01:
                    af:aa:05:6a:d4:f4:fe:89:81:d4:d3:b5:32:03:0a:
                    22:13:f6:52:42:e8:98:31:6e:63:8f:5b:3e:ed:01:
                    87:44:09:51:d5:ca:4c:e2:c8:bf:3e:f4:a3:73:91:
                    26:ed:a8:ae:5a:b0:b0:af:10:3b:e8:7b:c8:33:cd:
                    95:f6:d7:d9:91:b5:69:92:8b:e2:74:fc:7f:07:7e:
                    a5:a3:29:f1:50:8b:47:79:ad:f0:ef:ed:ce:5d:c5:
                    e1:1c:3a:6a:cb:73:b4:7c:67:30:d0:48:21:e8:d6:
                    7b:c0:e7:20:df:66:f9:39:d2:4a:14:a3:ae:eb:2c:
                    43:66:a3:55:71:e0:70:ae:e7:a1:97:d3:86:cc:15:
                    11:8e:e0:48:d4:46:cb:cd:b9:4f:61:02:85:e1:a9:
                    cb:b6:a3:2d:67:8f:40:44:5e:87:98:c3:be:a8:95:
                    29:96:c5:d9:1f:d2:8d:d8:ed:3e:1f:99:27:be:45:
                    58:0f:2a:2d:80:ef:8b:b8:26:47:fa:4d:ac:a5:25:
                    a7:54:dc:4f:34:88:13:05:ec:ce:38:81:e2:8e:06:
                    11:82:aa:6c:32:b8:05:ec:c0:2b:e3:5f:e1:08:9f:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:46:06:5C:ED:BE:4C:B3:A0:5B:1D:4C:FB:D4:C8:9E:D0:85:8D:62
            X509v3 Authority Key Identifier:
                keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bb:4d:b9:75:29:35:08:10:bb:75:20:c9:10:d6:d4:c8:0e:
         ef:a9:20:83:53:2f:af:ea:bd:a4:ab:6a:1b:0f:32:71:af:56:
         d9:b9:27:0d:91:85:f8:60:73:0e:1e:58:6a:15:3d:89:d1:e5:
         c9:e1:5f:75:c3:78:bc:87:66:1b:d9:20:25:d2:16:ff:8c:35:
         0f:8a:90:d9:cd:7c:c7:19:18:bf:dd:5b:3f:d8:d2:ae:9e:c7:
         b8:56:42:ba:1d:e5:41:13:57:d9:eb:2c:1c:c2:54:27:d9:da:
         26:58:d3:b4:89:b9:ce:29:df:5a:d1:be:80:76:3d:e8:8a:66:
         f1:e5:0b:69:ff:15:46:3a:ff:45:7c:ad:ee:85:af:56:91:64:
         a7:e3:89:ad:72:bd:f5:cf:cf:76:3b:d5:c6:75:8b:40:87:e3:
         98:7c:b6:b2:c0:88:e6:70:b2:db:81:c2:2f:59:ae:55:05:b4:
         19:40:47:0d:14:f7:a1:6f:61:0e:4b:f0:8e:6c:99:6b:e5:c4:
         9c:5b:68:be:80:a8:7d:1a:4c:47:ac:75:a4:35:0a:cd:f2:d4:
         28:f6:d5:0a:00:24:24:8e:12:78:68:37:f9:90:7f:c9:91:3d:
         5a:fd:1f:88:1d:45:b1:04:90:17:14:94:49:db:49:d8:99:b6:
         a5:39:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 00:03:06 2025 by rpki-client